feat: add support for workflow_dispatch event

README.md

@@ -41,6 +41,9 @@ _Optional_ A flag to only auto-merge updates based on Semantic Versioning. Defau
 
 For more details on how semantic version difference calculated please see [semver](https://www.npmjs.com/package/semver) package
 
+### `pr-number`
+
+_Optional_ A pull request number, only required if triggered from a workflow_dispatch event. Typically this would be triggered by a script running in a seperate CI provider. See [Trigger action from workflow_dispatch event](#trigger-action-from-workflow_dispatch-event)
 
 ## Example usage
 
@@ -85,6 +88,42 @@ steps:
       approve-only: true
 ```
 
+### Trigger action from workflow_dispatch event
+
+If you need to trigger this action manually, you can use the [workflow_dispatch](https://docs.github.com/en/actions/reference/events-that-trigger-workflows#workflow_dispatch) event. A use case might be that your CI runs on a seperate provider, so you would like to run this action as a result of a successful CI run.
+
+When using the `workflow_dispatch` approach, you will need to send the PR number as part of the input for this action:
+
+```yml
+name: automerge
+
+on: 
+  workflow_dispatch:
+    inputs:
+      pr:
+        required: true
+
+jobs:
+  automerge:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: fastify/github-action-merge-dependabot@v2.2.0
+        with:
+          github-token: ${{ secrets.GITHUB_TOKEN }}
+          pr: ${{ github.event.inputs.pr }}
+```
+
+You can initiate a call to trigger this event via [API](https://docs.github.com/en/rest/reference/actions/#create-a-workflow-dispatch-event):
+
+```bash
+# Note: replace dynamic values with your relevant data
+curl -X POST \
+  -H "Accept: application/vnd.github.v3+json" \
+  -H "Authorization: token {token}" \
+  https://api.github.com/repos/{owner}/{reponame}/actions/workflows/{workflow}/dispatches \
+  -d '{"ref":"{ref}", "inputs":{ "pr-number": "{number}"}}'
+```
+
 ## Notes
 
 - A GitHub token is automatically provided by Github Actions, which can be accessed using `secrets.GITHUB_TOKEN` and supplied to the action as an input `github-token`.

action.yml

@@ -27,6 +27,9 @@ inputs:
     description: 'Auto-merge on major, minor, patch updates based on Semantic Versioning'
     required: false
     default: 'major'
+  pr-number:
+    description: 'A pull request number, only required if triggered from a workflow_dispatch event'
+    required: false
 runs:
   using: 'node12'
   main: 'dist/index.js'

dist/index.js

@@ -6676,6 +6676,53 @@ const checkTargetMatchToPR = (prTitle, target) => {
 module.exports = checkTargetMatchToPR
 
 
+/***/ }),
+
+/***/ 6754:
+/***/ ((module, __unused_webpack_exports, __nccwpck_require__) => {
+
+"use strict";
+
+
+const github = __nccwpck_require__(5438)
+
+const { getInputs } = __nccwpck_require__(6254)
+const { logError } = __nccwpck_require__(653)
+
+const { GITHUB_TOKEN, PR_NUMBER } = getInputs()
+
+const getPullRequest = async () => {
+  const payload = github.context.payload
+
+  // Checks for "workflow" context to set the pull request, otherwise defaults to checking "pull request" context
+  if (payload.workflow) {
+    if (!PR_NUMBER || (PR_NUMBER && isNaN(PR_NUMBER))) {
+      return logError(
+        'Missing or invalid pull request number. Please make sure you are using a valid pull request number'
+      )
+    }
+
+    const octokit = github.getOctokit(GITHUB_TOKEN)
+
+    const repo = payload.repository
+    const owner = repo.owner.login
+    const repoName = repo.name
+
+    const { data: pullRequest } = await octokit.rest.pulls.get({
+      owner,
+      repo: repoName,
+      pull_number: PR_NUMBER,
+    })
+
+    return pullRequest
+  } else {
+    return payload.pull_request
+  }
+}
+
+module.exports = getPullRequest
+
+
 /***/ }),
 
 /***/ 5013:
@@ -6772,6 +6819,7 @@ exports.getInputs = () => ({
   APPROVE_ONLY: /true/i.test(core.getInput('approve-only')),
   API_URL: core.getInput('api-url'),
   TARGET: getTargetInput(core.getInput('target')),
+  PR_NUMBER: core.getInput('pr-number'),
 })
 
 
@@ -6936,6 +6984,7 @@ const github = __nccwpck_require__(5438)
 const fetch = __nccwpck_require__(467)
 
 const checkTargetMatchToPR = __nccwpck_require__(7186)
+const getPullRequest = __nccwpck_require__(6754)
 const { logInfo, logWarning, logError } = __nccwpck_require__(653)
 const { getInputs } = __nccwpck_require__(6254)
 
@@ -6953,15 +7002,17 @@ const GITHUB_APP_URL = 'https://github.com/apps/dependabot-merge-action'
 
 async function run() {
   try {
-    const { pull_request: pr } = github.context.payload
+    const { pull_request, workflow } = github.context.payload
+
+    const isSupportedContext = pull_request || workflow
 
-    if (!pr) {
+    if (!isSupportedContext) {
       return logError(
-        'This action must be used in the context of a Pull Request'
+        'This action must be used in the context of a Pull Request or a Workflow Dispatch event'
       )
     }
 
-    const pullRequestNumber = pr.number
+    const pr = await getPullRequest()
 
     const isDependabotPR = pr.user.login === 'dependabot[bot]'
 
@@ -6989,7 +7040,7 @@ async function run() {
         'content-type': 'application/json',
       },
       body: JSON.stringify({
-        pullRequestNumber,
+        pullRequestNumber: pr.number,
         approveOnly: APPROVE_ONLY,
         excludePackages: EXCLUDE_PKGS,
         approveComment: MERGE_COMMENT,

src/getPullRequest.js

@@ -0,0 +1,39 @@
+'use strict'
+
+const github = require('@actions/github')
+
+const { getInputs } = require('./util')
+const { logError } = require('./log')
+
+const { GITHUB_TOKEN, PR_NUMBER } = getInputs()
+
+const getPullRequest = async () => {
+  const payload = github.context.payload
+
+  // Checks for "workflow" context to set the pull request, otherwise defaults to checking "pull request" context
+  if (payload.workflow) {
+    if (!PR_NUMBER || (PR_NUMBER && isNaN(PR_NUMBER))) {
+      return logError(
+        'Missing or invalid pull request number. Please make sure you are using a valid pull request number'
+      )
+    }
+
+    const octokit = github.getOctokit(GITHUB_TOKEN)
+
+    const repo = payload.repository
+    const owner = repo.owner.login
+    const repoName = repo.name
+
+    const { data: pullRequest } = await octokit.rest.pulls.get({
+      owner,
+      repo: repoName,
+      pull_number: PR_NUMBER,
+    })
+
+    return pullRequest
+  } else {
+    return payload.pull_request
+  }
+}
+
+module.exports = getPullRequest

src/index.js

@@ -5,6 +5,7 @@ const github = require('@actions/github')
 const fetch = require('node-fetch')
 
 const checkTargetMatchToPR = require('./checkTargetMatchToPR')
+const getPullRequest = require('./getPullRequest')
 const { logInfo, logWarning, logError } = require('./log')
 const { getInputs } = require('./util')
 
@@ -22,15 +23,17 @@ const GITHUB_APP_URL = 'https://github.com/apps/dependabot-merge-action'
 
 async function run() {
   try {
-    const { pull_request: pr } = github.context.payload
+    const { pull_request, workflow } = github.context.payload
 
-    if (!pr) {
+    const isSupportedContext = pull_request || workflow
+
+    if (!isSupportedContext) {
       return logError(
-        'This action must be used in the context of a Pull Request'
+        'This action must be used in the context of a Pull Request or a Workflow Dispatch event'
       )
     }
 
-    const pullRequestNumber = pr.number
+    const pr = await getPullRequest()
 
     const isDependabotPR = pr.user.login === 'dependabot[bot]'
 
@@ -58,7 +61,7 @@ async function run() {
         'content-type': 'application/json',
       },
       body: JSON.stringify({
-        pullRequestNumber,
+        pullRequestNumber: pr.number,
         approveOnly: APPROVE_ONLY,
         excludePackages: EXCLUDE_PKGS,
         approveComment: MERGE_COMMENT,

src/util.js

@@ -32,4 +32,5 @@ exports.getInputs = () => ({
   APPROVE_ONLY: /true/i.test(core.getInput('approve-only')),
   API_URL: core.getInput('api-url'),
   TARGET: getTargetInput(core.getInput('target')),
+  PR_NUMBER: core.getInput('pr-number'),
 })